Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/gOULZz-RD8Ey1gbJQN9BPeEF6v8.roa
File: gOULZz-RD8Ey1gbJQN9BPeEF6v8.roa (raw, json)
Hash identifier: Cmrxu0AZUYoNvJ00s6NxKwMvOYU4v8/B601q2WilOR4=
Subject key identifier: 80:E5:0B:67:3F:91:0F:C1:32:D6:06:C9:40:DF:41:3D:E1:05:EA:FF
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01856F8B8C54C674A8C4B31BCFB888BBB8D9
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/gOULZz-RD8Ey1gbJQN9BPeEF6v8.roa
Signing time: Sun 01 Jan 2023 22:54:54 +0000
ROA not before: Sun 01 Jan 2023 22:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51665
IP address blocks: 178.237.192.0/24 maxlen: 24
178.237.192.0/21 maxlen: 21
178.237.198.0/24 maxlen: 24
178.237.199.0/24 maxlen: 24
178.237.193.0/24 maxlen: 24
178.237.194.0/24 maxlen: 24
178.237.195.0/24 maxlen: 24
178.237.196.0/24 maxlen: 24
178.237.197.0/24 maxlen: 24
178.237.205.0/24 maxlen: 24
178.237.200.0/24 maxlen: 24
178.237.201.0/24 maxlen: 24
178.237.202.0/24 maxlen: 24
178.237.200.0/22 maxlen: 22
178.237.203.0/24 maxlen: 24
178.237.204.0/24 maxlen: 24
178.237.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8c:54:c6:74:a8:c4:b3:1b:cf:b8:88:bb:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 22:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80e50b673f910fc132d606c940df413de105eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:01:3a:b4:87:fa:6a:dc:74:92:34:5b:f7:
9f:c4:39:bf:e0:94:09:0a:9b:8f:e9:4d:12:34:56:
d8:e1:12:8e:97:81:2c:5c:72:65:c3:be:c3:52:bd:
95:5b:5c:ce:94:45:ce:f8:74:20:d0:d2:6c:57:11:
e9:63:1b:ea:d2:58:fe:7c:9c:d0:d4:1e:6b:8b:27:
1c:2f:e6:79:d1:ed:19:f7:c7:bb:88:41:75:78:f0:
c4:be:79:35:26:27:8d:95:f8:da:82:61:27:f2:2b:
e1:11:fc:1b:b6:2f:0c:00:d4:91:6c:d2:7e:79:26:
e7:2c:0b:b2:04:b4:89:3e:aa:3c:f6:52:33:d8:73:
7d:6d:b5:25:52:03:72:f2:a0:37:73:da:40:d2:3f:
43:69:f4:c6:d0:1f:a9:47:c0:d0:04:50:da:9d:68:
c6:14:b1:2c:82:ff:63:e1:0d:db:f7:8c:68:7d:c6:
b1:26:0f:34:e9:13:e5:f3:01:b7:16:49:e0:23:c8:
6a:35:64:38:6b:51:6e:d6:b4:a6:4d:31:8f:83:1c:
fa:d0:3c:3f:c3:ed:be:28:58:92:aa:1b:03:77:36:
c8:3a:b2:98:da:58:ee:83:0e:94:d3:20:a6:15:e6:
96:bc:26:d2:e5:fa:6c:a7:97:2b:f7:83:8d:2a:43:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:0B:67:3F:91:0F:C1:32:D6:06:C9:40:DF:41:3D:E1:05:EA:FF
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/gOULZz-RD8Ey1gbJQN9BPeEF6v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.192.0-178.237.205.255
178.237.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:37:d1:3c:0f:1e:90:3d:0d:ff:f3:77:10:8c:24:76:8c:9f:
9c:58:d0:1f:2b:84:f6:91:91:22:78:7e:c7:8d:8e:cc:42:01:
d2:cb:a1:e6:c8:51:42:c6:c1:e6:04:ec:d5:92:a8:fe:ce:7b:
52:1c:97:08:ab:45:f4:fd:ee:b2:20:e3:88:b2:99:b6:b1:e9:
77:7c:08:31:39:92:27:d4:72:60:8d:3b:f6:f2:4c:ee:e1:26:
08:6a:3b:0d:ff:a7:3e:cb:20:3c:e3:a1:d2:7d:7e:4d:b2:7c:
d8:7c:53:0f:30:1b:34:f0:13:2a:5e:7e:be:54:ae:43:e9:fb:
8e:6c:3f:3a:b4:1b:d4:e7:0f:e6:17:06:89:cb:f0:4f:5c:de:
7e:7b:d2:62:f8:c2:fb:5a:48:a2:0e:90:64:3e:9f:5f:ec:92:
46:27:c8:c2:5b:ce:03:f2:c5:c4:86:93:d1:5f:73:9d:26:db:
43:85:a3:75:d8:fd:32:d6:c5:58:65:1b:29:43:e1:b5:f6:21:
d9:b6:75:36:e4:d1:0d:a3:f4:8d:3a:b6:2c:17:ad:1a:4b:c3:
98:72:e4:9b:3b:21:d8:4e:03:d5:94:3b:12:d5:3a:03:54:de:
76:56:f7:d1:cf:49:7b:18:84:5b:0c:30:32:27:99:e1:92:fe:
56:6c:7a:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:25 2025 by rpki-client